Activity Feed
- Posted How to use Wildcards with eval, stats, and count? on Splunk Search. 11-09-2022 08:07 AM
- Tagged How to use Wildcards with eval, stats, and count? on Splunk Search. 11-09-2022 08:07 AM
- Tagged How to use Wildcards with eval, stats, and count? on Splunk Search. 11-09-2022 08:07 AM
- Tagged How to use Wildcards with eval, stats, and count? on Splunk Search. 11-09-2022 08:07 AM
- Tagged How to use Wildcards with eval, stats, and count? on Splunk Search. 11-09-2022 08:07 AM
- Posted Re: Combining two field values into one field from a .csv file on Splunk Search. 11-09-2022 06:54 AM
- Karma Re: Combining two field values into one field from a .csv file for richgalloway. 11-09-2022 06:54 AM
- Posted How to combine two field values into one field from a .csv file? on Splunk Search. 11-09-2022 06:49 AM
- Tagged How to combine two field values into one field from a .csv file? on Splunk Search. 11-09-2022 06:49 AM
- Tagged How to combine two field values into one field from a .csv file? on Splunk Search. 11-09-2022 06:49 AM
- Karma Re: Adding a picture to a dashboard in XML Source Code for gcusello. 11-03-2022 07:10 AM
- Posted Adding a picture to a dashboard in XML Source Code on Dashboards & Visualizations. 11-03-2022 06:42 AM
- Tagged Adding a picture to a dashboard in XML Source Code on Dashboards & Visualizations. 11-03-2022 06:42 AM
- Tagged Adding a picture to a dashboard in XML Source Code on Dashboards & Visualizations. 11-03-2022 06:42 AM
- Tagged Adding a picture to a dashboard in XML Source Code on Dashboards & Visualizations. 11-03-2022 06:42 AM
- Tagged Adding a picture to a dashboard in XML Source Code on Dashboards & Visualizations. 11-03-2022 06:42 AM
- Posted Re: How to remove Commas In a Field Value? on Getting Data In. 10-07-2022 10:24 AM
- Posted Re: Removing Commas In a Field Value on Getting Data In. 10-06-2022 01:24 PM
- Posted How to remove Commas In a Field Value? on Getting Data In. 10-06-2022 01:18 PM
- Tagged How to remove Commas In a Field Value? on Getting Data In. 10-06-2022 01:18 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
11-09-2022
08:07 AM
Hello! I have a field called "Customers Email" and I wanted to get a count of all the emails that end in .gov, .edu, .org and so on. I am using the eval and stats count functions to do this; however, my results show up with values of 0 for each type of email. Since wildcards do not work with eval, I put the wildcards like ".*..gov" so that it would just look at the .gov etc. of each email. This is my search: | stats count(eval("Customers Email" = ".*..gov")) as ".gov", count(eval("Customers Email" = ".*..org")) as ".org", count(eval("Customers Email" = ".*..com")) as ".com", count(eval("Customers Email" = ".*..edu")) as ".edu", count(eval("Customers Email" = ".*..us")) as ".us", count(eval("Customers Email" = ".*..net")) as ".net" This is the output I get from running this search: Is there a reason why I am getting a count of 0?
... View more
Labels
- Labels:
-
eval
11-09-2022
06:54 AM
Thank you very much! Have a good day!
... View more
11-09-2022
06:49 AM
Hello!
I have a csv file where there are two fields called "Customers First Name" and "Customers Last Name". I was wondering if there is a way to combine the values of each field in the same row into one new field.
Thank you! 🙂
... View more
- Tags:
- combining fields
- csv
Labels
- Labels:
-
fields
11-03-2022
06:42 AM
Hello! So I just have a dashboard for practicing different searches and XML Code, etc (MacOS). and I was trying to include a random static jpg picture in the source code in the beginning of my dashboard. This is what I have in source code based on similar questions here on Splunk Answers: <html> /*this is where all my styling is for font, size, colors, alignment, etc. for a title and I wanted to include a jpg right after*/ <img src="static/app/search/images/picture.jpg/"> </html> I'm not sure what exact file path to place my jpg or code I would need to get this to work. There are two different answers I found here on Splunk Answers: splunk/etc/apps/search/appserver/static/images/picture.jpg splunk/apps/search/static/images/picture.jpg I tried both ways to no avail. (I created the folder 'images')
... View more
Labels
- Labels:
-
dashboard
-
simple XML
10-06-2022
01:24 PM
To add, since there's a .tostring and fieldformat option to format values is there a way in the raw search to remove commas?
... View more
10-06-2022
01:18 PM
Hello!
I have recently just downloaded Splunk on my MAC for experimenting/practicing searching and dashboarding. I just picked a random csv file that has planetary information.
One of the fields in my .csv file has a mix of numbers without commas, and three numbers that have a comma.
EX: 59,800
I think this is causing those values to not show up in my visualization.
Is there a way to remove said comma from the field value? I tried using this below in the source code under the visualization but it says it's an unknown option name.
<option name="useThousandSeparators">false</option>
... View more
Labels
- Labels:
-
CSV
10-27-2020
11:17 AM
I've had the same problem with the Cloud Trial along with the Enterprise Security Trial Sandbox. Didn't get any confirmation email with links to the sandbox or cloud version. I have the free core Splunk on my pc, but wanted to try out the other trials for experience.
... View more
10-26-2020
01:53 PM
I have had the same issue just today, not sure how go about this problem. I was able to download signalFx trial.
... View more
